Re: Allow only a specific group to login

[jmarquart@planalytics.com]

I believe this is more of an nss_ldap / pam_ldap question, but check the
parameter:

pam_groupdn

pam is supposed to enforce membership to the group DN supplied here.


There are some other attributes you may also find usefull to restrict which
groups/users  nss / pam operations operate on.

check padl / the padl lists. (www.padl.com)

-j







Markus Schabel <markus.schabel@tgm.ac.at> on 10/29/2002 02:24:49 PM




To:   openldap-software@OpenLDAP.org
cc:    (bcc: John J. der Schalla Marquart/Planalytics)

Subject:  Allow only a specific group to login




Hi!

We have currently about 500 users in our OpenLDAP Directory, and a lot
of groups. Is there any possibility to allow only one or some groups
access to a server per ssh/shell/...?

regards
Markus